Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: 1NitEeo3Kr1O8eS9l/Qa3yxQXTlhj/qYIsvifcL4E8o=
Subject key identifier: 71:E2:CC:35:2D:74:76:18:45:AC:9F:74:98:A7:AC:62:7A:D4:F7:B3
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0194BCA9F4043FBA81711DCE26304B0AA975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: JGQdM0a7DAGwOoxgDPeQJtSMrxXZ5sEOsQprr+CY6I4=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f4:04:3f:ba:81:71:1d:ce:26:30:4b:0a:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=71e2cc352d74761845ac9f7498a7ac627ad4f7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:da:59:10:9e:bf:b2:c6:11:50:b5:a4:59:
e9:90:0d:de:68:c2:2a:3f:88:88:c4:2c:e0:d8:70:
a6:88:70:e1:6d:84:44:ad:48:91:59:c6:1b:6e:6e:
7b:e4:3f:25:06:0b:30:a3:51:b1:f4:12:ac:82:d7:
ab:1a:a6:34:ba:b2:2c:56:42:2c:0a:9e:ae:16:e1:
93:da:49:96:15:c8:9e:72:d7:f7:01:9e:8d:b8:c9:
9a:94:9f:75:dd:93:f5:33:93:e6:30:d7:4b:d5:5a:
77:74:d0:16:83:56:8d:2e:2d:f6:c1:ff:e6:ee:b2:
71:ba:d8:1d:b5:20:b6:58:07:c5:13:56:51:b8:91:
f5:da:40:51:91:cb:2e:90:e5:d7:0d:a1:e0:1a:41:
64:64:8e:50:16:e9:4c:b1:80:cb:d4:aa:ae:0d:8c:
1f:1f:2e:1d:af:b7:a4:39:e1:f6:81:20:b4:60:93:
de:bb:f4:46:e1:94:24:b0:4f:16:d3:5d:93:41:4c:
2e:b0:05:b4:f2:fd:1b:ad:9e:18:98:5e:d3:b8:2a:
dc:4a:fe:6e:80:a3:94:22:2b:3a:a5:d5:a9:32:c4:
2a:ed:9b:03:33:f5:3f:83:1f:4a:0d:09:41:49:de:
94:35:6d:a7:c7:0d:a7:70:78:88:c1:3d:b7:6d:8d:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:CC:35:2D:74:76:18:45:AC:9F:74:98:A7:AC:62:7A:D4:F7:B3
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:07:21:13:7f:42:d6:6b:47:2e:0d:f6:18:8e:b3:99:d1:8f:
0c:70:97:2e:3a:6c:74:b9:3c:e3:0d:51:2b:21:6d:c3:74:64:
f3:31:af:92:b3:a1:6f:75:fe:1f:f3:d6:be:e1:97:35:9f:82:
e5:cd:fc:80:1a:71:17:88:33:0c:18:7b:29:44:9c:62:ff:be:
67:dd:b5:1c:8c:b7:94:d3:4f:2d:ad:a1:e0:99:ed:80:1a:9d:
36:03:83:5b:ae:c9:fc:ef:04:7f:3d:09:09:c2:69:87:90:12:
3d:d8:84:3a:4f:e8:aa:6b:07:f4:cb:d6:22:80:6a:d9:99:27:
4d:75:6e:7b:63:fb:e0:c3:64:8a:7a:33:e5:e2:f6:14:72:dd:
79:b7:f0:b3:9c:7a:a8:7e:13:81:e8:be:b7:1f:bd:dc:76:d8:
c1:94:a1:45:c0:e5:9d:43:96:6d:9d:35:53:38:a5:63:52:8f:
61:53:b9:f8:ee:f7:fd:92:86:98:b5:8e:96:46:7f:54:ef:71:
71:f8:79:de:a7:02:10:26:2c:47:94:6d:f9:cc:7d:24:13:e5:
f2:de:e9:01:61:24:39:c4:95:3a:12:53:06:68:b4:b8:1f:a9:
d1:ae:cb:96:11:42:51:1f:c8:82:d3:a0:48:71:1d:79:3b:10:
f6:d5:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:43 2025 by rpki-client